Configuring Port-Based and Client-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
[reauthenticate]
Forces reauth en tic at ion (unless the authenticator is
in “HELD” state).
[clear-statistics]
Clears authenticator statistics counters.
[logoff-period]
Configures the period of time the switch waits for
client activity before removing an inactive client from
the port.
[unauth-period < 0-255 >]
Available only in 5300xl switches running software
release E.09.xx or greater. Specifies a delay in seconds
for placing a port on the Unauthorized-Client VLAN.
This delay allows more time for a client with 802.1X
supplicant capability to initiate an authentication
session. If a connected client does not initiate a session
before the timer expires, the port is assigned to the
Unauthenticated-Client VLAN.
3. Configure the 802.1X Authentication Method
This task specifies how the switch authenticates the credentials provided by
a supplicant connected to a switch port configured as an 802.1X authenticator.
Syntax: aaa authentication port-access < local | eap-radius | chap-radius >
Determines the type of RADIUS authentication to use.
local Use the switch’s local username and password for
supplicant authentication.
eap-radius Use EAP-RADIUS authentication. (Refer to the
documentation for your RADIUS server application.)
chap-radius Use CHAP-RADIUS (MD-5) authentication.
(Refer to the documentation for your RADIUS server appli
-
cation.)
10-19
To Next Page
Loading...
